Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/23c73c80-b368-335e-8b8c-0a8d889b6664.roa
File:                     23c73c80-b368-335e-8b8c-0a8d889b6664.roa (raw, json)
Hash identifier:          sDDw74JABzCFXUTpSlPazTKdyXTBQoVUOHIsX3CyBmM=
Subject key identifier:   07:CC:5B:9D:04:4E:ED:05:6B:FE:24:4E:9B:30:6C:AF:B7:51:99:A4
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584819CFDE1B43527053E0099580
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/23c73c80-b368-335e-8b8c-0a8d889b6664.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     14956
IP address blocks:        144.172.74.0/24 maxlen: 24
                          144.172.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:de:1b:43:52:70:53:e0:09:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=0f09b360-2d21-47f1-a367-32b04bf65563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:95:ba:ad:0e:a5:91:7c:56:61:a6:00:6c:d5:
                    55:10:e5:d1:e5:5b:af:2f:df:41:76:e2:c5:ab:dc:
                    84:ea:9f:8e:ed:c5:6a:b2:e2:df:a8:3d:ac:27:0d:
                    6a:df:d5:b0:f2:7c:8a:75:2c:cd:4d:b5:06:9a:7a:
                    8d:9c:ad:ba:1c:8c:46:ec:6e:2c:d1:bc:f1:99:ed:
                    10:ee:91:b0:9b:58:19:cf:46:69:30:52:fa:95:6c:
                    0f:55:ef:48:91:9c:ef:5f:14:35:b3:be:d8:df:e9:
                    03:58:89:a0:30:58:19:49:12:2f:d9:f3:ba:d5:51:
                    3a:8b:f7:35:71:db:00:d0:c2:8b:ae:b9:84:49:2d:
                    ad:1d:e2:b0:17:9a:8f:cd:42:77:72:3a:e9:89:fd:
                    99:49:34:a9:df:c0:08:05:7c:bb:ea:0e:08:ed:85:
                    de:cf:0f:c8:26:91:3e:90:94:08:1d:bc:91:f6:41:
                    10:ae:03:7b:43:ac:36:ed:d9:55:96:13:b8:71:e5:
                    1b:23:0f:d2:19:1f:4c:95:49:f4:1c:5f:33:b9:c2:
                    9d:64:12:56:52:7d:48:96:91:fd:57:db:c9:9f:a3:
                    13:c3:33:ac:03:9b:36:ea:4e:e6:85:29:70:71:f7:
                    31:85:84:2f:7c:35:c9:d2:fa:17:32:46:7a:7d:8f:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CC:5B:9D:04:4E:ED:05:6B:FE:24:4E:9B:30:6C:AF:B7:51:99:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/23c73c80-b368-335e-8b8c-0a8d889b6664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.74.0/24
                  144.172.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c5:98:69:11:7c:46:14:d8:2f:c8:15:24:7c:25:57:68:0b:
         3e:e4:9c:45:f1:a0:b0:53:b5:cd:ec:9b:14:88:83:f3:ed:83:
         75:f9:46:f8:61:61:61:7a:9c:94:8d:ae:32:5d:56:73:b8:e6:
         b9:90:ea:7d:ca:8f:b5:b2:b3:db:d7:01:ab:5e:34:a5:fe:9c:
         1d:1b:6d:c7:f1:7b:28:29:0b:3e:2e:98:76:4c:a6:01:7e:c1:
         18:ab:c1:97:3e:b5:64:c4:21:6b:ed:cc:7f:02:66:7e:90:25:
         45:f2:23:7d:12:22:51:ab:cf:a2:fd:be:22:93:cf:00:5d:f2:
         b6:94:77:cc:0b:06:ae:42:09:08:61:ff:db:1a:64:c3:0a:29:
         9c:43:c6:c8:35:54:10:6c:ee:bd:f8:b7:ef:5a:bf:04:1d:50:
         a0:71:43:32:5d:43:8d:1d:dd:f7:a5:ba:9a:f7:47:c6:84:0f:
         3e:ac:e2:08:6d:67:4e:05:f3:51:ee:ac:58:7a:80:83:e1:f6:
         33:9b:82:c0:8a:56:ae:17:71:05:4f:35:79:f3:07:8d:b6:30:
         2c:74:ec:c9:8e:fd:ee:45:53:e8:7c:78:da:ee:51:2f:8c:11:
         c0:4d:bf:a8:40:8b:52:55:43:5e:06:03:f1:fa:32:c4:f0:0a:
         22:03:24:15
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgZz94bQ1JwU+AJlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
MGYwOWIzNjAtMmQyMS00N2YxLWEzNjctMzJiMDRiZjY1NTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5W6rQ6lkXxWYaYAbNVVEOXR5VuvL99BduLF
q9yE6p+O7cVqsuLfqD2sJw1q39Ww8nyKdSzNTbUGmnqNnK26HIxG7G4s0bzxme0Q
7pGwm1gZz0ZpMFL6lWwPVe9IkZzvXxQ1s77Y3+kDWImgMFgZSRIv2fO61VE6i/c1
cdsA0MKLrrmESS2tHeKwF5qPzUJ3cjrpif2ZSTSp38AIBXy76g4I7YXezw/IJpE+
kJQIHbyR9kEQrgN7Q6w27dlVlhO4ceUbIw/SGR9MlUn0HF8zucKdZBJWUn1IlpH9
V9vJn6MTwzOsA5s26k7mhSlwcfcxhYQvfDXJ0voXMkZ6fY8FlQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAfMW50ETu0Fa/4kTpswbK+3UZmkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvMjNjNzNjODAtYjM2OC0z
MzVlLThiOGMtMGE4ZDg4OWI2NjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkKxKAwQA
kKxMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEDFmGkRfEYU2C/IFSR8JVdoCz7knEXxoLBTtc3smxSIg/Pt
g3X5RvhhYWF6nJSNrjJdVnO45rmQ6n3Kj7Wys9vXAateNKX+nB0bbcfxeygpCz4u
mHZMpgF+wRirwZc+tWTEIWvtzH8CZn6QJUXyI30SIlGrz6L9viKTzwBd8raUd8wL
Bq5CCQhh/9saZMMKKZxDxsg1VBBs7r34t+9avwQdUKBxQzJdQ40d3felupr3R8aE
Dz6s4ghtZ04F81HurFh6gIPh9jObgsCKVq4XcQVPNXnzB422MCx07MmO/e5FU+h8
eNruUS+MEcBNv6hAi1JVQ14GA/H6MsTwCiIDJBU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:04:31 2025 by rpki-client